Security and privacy

We read reviews and post replies through Apple's and Google's own APIs, using access you granted.

No scraping, and no logging in to a store as you. That matters beyond principle: unofficial access is what gets listings flagged, and your listing is the thing being protected here.

The one place a browser is involved is optional Spam Automation: your own AI assistant files spam reports on the store's site, in a browser where you are already signed in. ScaleSensor never receives your store passwords.

Sign-in is a 6-digit code sent to your email, through your ScaleSensor account. There is no password, which means there is no password to reuse, leak, or phish. Codes expire after 10 minutes, are stored hashed, and stop working after 5 wrong attempts.

You are signed in on one device at a time: signing in somewhere new signs the other device out. A session ends after 72 hours without activity. One session covers every ScaleSensor sensor, so switching sensors never signs you out.

The keys and tokens you connect are encrypted at rest and never returned to the browser. Nothing in the interface will show you a stored secret, not even to you: saved credentials are listed by name with the Key ID or email partly masked.

Your workspace is always taken from your verified sign-in, never from something the browser claims. AI Review Sensor keeps its data in its own database, separate from the other ScaleSensor sensors.

ScaleSensor never stores card details. Payments go through Paddle.

Reviews from the sources you connected, the replies drafted for them, and what happened to each one. That history is what makes the analytics and the digests possible.

Reviewer data comes from what the platform gives us with the review: the same public text and display name anyone reading your listing can see.

Deleting an app on the Integrations page removes the reviews and drafts that came from it. Analytics exports the integrations summary to CSV whenever you want it.

There is no self-serve export of everything we hold, and no self-serve account deletion. To get a copy of your data or have it deleted, send a request; the routes are in the data deletion policy. Depending on where you live you have the right to access, correct, delete or export your data.

We do not sell any of it. The details are in the privacy policy, and there is a Data Processing Agreement if your compliance team needs one. See the DPA.

The last control is the one that matters most in public: nothing posts under your name unless the automation mode is Auto-send, and even then reviews below your star threshold, spam, abusive and money-related reviews are held for a person.

If you are ever unsure what the automation would do, switch back to AI Drafts. Drafting continues, and every reply waits for a person again.